Commit 0f5493e60b for openssl.org

commit 0f5493e60b9e8ec500de5812fe28b9f564408608
Author: Loganaden Velvindron <logan@cyberstorm.mu>
Date:   Tue Jul 28 21:50:53 2026 +0400

    storemgmt: Validate msblob length before buffer allocation

    Reviewed-by: Paul Dale <paul.dale@oracle.com>
    Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
    Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
    Merge-date: Wed Aug 12 09:54:12 2026
    Merged-from: https://github.com/openssl/openssl/pull/32102

diff --git a/providers/implementations/storemgmt/file_store_any2obj.c b/providers/implementations/storemgmt/file_store_any2obj.c
index 2592ab04ab..8409c17881 100644
--- a/providers/implementations/storemgmt/file_store_any2obj.c
+++ b/providers/implementations/storemgmt/file_store_any2obj.c
@@ -193,6 +193,12 @@ static int msblob2obj_decode(void *vctx, OSSL_CORE_BIO *cin, int selection,

     ok = 0;
     mem_want = ossl_blob_length(bitlen, isdss, ispub);
+
+    if (bitlen > BLOB_MAX_LENGTH) {
+        ERR_raise(ERR_LIB_PEM, PEM_R_HEADER_TOO_LONG);
+        goto err;
+    }
+
     if (!BUF_MEM_grow(mem, mem_len + mem_want)) {
         ERR_raise(ERR_LIB_PEM, ERR_R_BUF_LIB);
         goto err;